d9e3ea1a9d- Latest update from NSA Update checkpolicy for user and role mapping support from Joshua Brindle.
checkpolicy-2_0_16-1_fc10
Daniel J Walsh
2008-05-28 15:15:49 +0000
1ca4c44086- Latest update from NSA Add permissive domain support from Eric Paris.
Daniel J Walsh
2008-03-27 17:39:08 +0000
3181c033e3- Latest update from NSA Split out non-grammar parts of policy_parse.yacc into policy_define.c and policy_define.h from Todd C. Miller. Initialize struct policy_file before using it, from Todd C. Miller. Remove unused define, move variable out of .y file, simplify COND_ERR, from Todd C. Miller.
checkpolicy-2_0_13-1_fc9
Daniel J Walsh
2008-03-14 00:24:03 +0000
164c17c9c1- Latest update from NSA Split out non-grammar parts of policy_parse.yacc into policy_define.c and policy_define.h from Todd C. Miller. Initialize struct policy_file before using it, from Todd C. Miller. Remove unused define, move variable out of .y file, simplify COND_ERR, from Todd C. Miller.
Daniel J Walsh
2008-03-13 23:47:55 +0000
e22ff16832- Latest update from NSA Use yyerror2() where appropriate from Todd C. Miller. - Build against latest libsepol
checkpolicy-2_0_10-1_fc9
Daniel J Walsh
2008-02-28 21:57:00 +0000
88d15070c2- Latest update from NSA Update dispol for libsepol avtab changes from Stephen Smalley.
checkpolicy-2_0_9-1_fc9
Daniel J Walsh
2008-02-04 19:06:00 +0000
d793dcb07e- Latest update from NSA Update dispol for libsepol avtab changes from Stephen Smalley.
Daniel J Walsh
2008-02-04 17:24:34 +0000
4dd1371296- Update to use libsepol-static library
Daniel J Walsh
2008-01-21 21:42:58 +0000
5c3895bc13- Latest update from NSA Initialize the source file name from the command line argument so that checkpolicy/checkmodule report something more useful than "unknown source". Merged remove use of REJECT and trailing context in lex rules; make ipv4 address parsing like ipv6 from James Carter.
checkpolicy-2_0_6-1_fc9
Daniel J Walsh
2007-11-15 18:41:43 +0000
b1847478b9Initialize branch F-8 for checkpolicy
Jesse Keating
2007-10-20 04:51:28 +0000
5d693896f6Merged handle unknown policydb flag support from Eric Paris. Adds new command line options -U {allow, reject, deny} for selecting the flag when a base module or kernel policy is built.
checkpolicy-2_0_4-1_fc8
Daniel J Walsh
2007-09-19 00:20:03 +0000
e447bdb010- Latest update from NSA Merged fix for segfault on duplicate require of sensitivity from Caleb Case. Merged fix for dead URLs in checkpolicy man pages from Dan Walsh.
checkpolicy-2_0_3-1_fc7
Daniel J Walsh
2007-06-04 19:22:14 +0000
4bd6947fff- Latest update from NSA Merged fix for segfault on duplicate require of sensitivity from Caleb Case. Merged fix for dead URLs in checkpolicy man pages from Dan Walsh.
checkpolicy-2_0_3-1_fc8
Daniel J Walsh
2007-06-04 19:21:50 +0000
5b415a1b3dInitialize branch F-7 for checkpolicy
Bill Nottingham
2007-05-18 03:17:14 +0000
c1870cdf3a- Latest update from NSA Merged patch to allow dots in class identifiers from Caleb Case.
checkpolicy-2_0_1-1_fc7
Daniel J Walsh
2007-02-20 14:59:15 +0000
1ec43fbb6a- Latest update from NSA Merged patch to use new libsepol error codes by Karl MacMillan. Updated version for stable branch.
checkpolicy-2_0_0-1_fc7
Daniel J Walsh
2007-02-07 21:42:36 +0000
f9c5836922- Latest update from NSA Collapse user identifiers and identifiers together.
checkpolicy-1_33_1-1
Daniel J Walsh
2006-11-28 18:56:56 +0000
c2957dde68- Latest update from NSA Collapse user identifiers and identifiers together.
Daniel J Walsh
2006-11-14 14:50:36 +0000
9e6b63128e- Latest update from NSA Updated version for release.
checkpolicy-1_32-1
Daniel J Walsh
2006-11-03 21:45:02 +0000
2fc5612c93- Latest update from NSA Merged user and range_transition support for modules from Darrel Goeddel
checkpolicy-1_30_12-1
FC-6-split
Daniel J Walsh
2006-09-29 14:22:59 +0000
39e4bfb0e8- Latest update from NSA merged range_transition enhancements and user module format changes from Darrel Goeddel Merged symtab datum patch from Karl MacMillan.
checkpolicy-1_30_11-1
Daniel J Walsh
2006-09-06 18:16:16 +0000
0962a544c8- Latest upgrade from NSA Lindent. Merged patch to remove TE rule conflict checking from the parser from Joshua Brindle. This can only be done properly by the expander. Merged patch to make checkpolicy/checkmodule handling of duplicate/conflicting TE rules the same as the expander from Joshua Brindle. Merged optionals in base take 2 patch set from Joshua Brindle.
checkpolicy-1_30_9-1
Daniel J Walsh
2006-07-05 10:43:21 +0000
0b33b45a9e- Latest upgrade from NSA Merged compiler cleanup patch from Karl MacMillan. Merged fix warnings patch from Karl MacMillan.
checkpolicy-1_30_5-1
Daniel J Walsh
2006-05-24 03:11:52 +0000
a7c8fb25b4- Latest upgrade from NSA Changed require_class to reject permissions that have not been declared if building a base module.
checkpolicy-1_30_4-1
Daniel J Walsh
2006-04-05 17:46:41 +0000
cb354e0254- Latest upgrade from NSA Fixed checkmodule to call link_modules prior to expand_module to handle optionals. Fixed require_class to avoid shadowing permissions already defined in an inherited common definition.
checkpolicy-1_30_3-1
Daniel J Walsh
2006-03-28 20:07:42 +0000
01a9ba841e- Latest upgrade from NSA Moved processing of role and user require statements to 2nd pass.
checkpolicy-1_30_1-1
Daniel J Walsh
2006-03-23 16:14:03 +0000
af7b9d6c00- Latest upgrade from NSA Updated version for release. Fixed bug in role dominance (define_role_dom).
checkpolicy-1_30-1
Daniel J Walsh
2006-03-17 18:36:26 +0000
dcec148fc4- Latest upgrade from NSA Added a check for failure to declare each sensitivity in a level definition. Changed to clone level data for aliased sensitivities to avoid double free upon sens_destroy. Bug reported by Kevin Carr of Tresys Technology.
checkpolicy-1_29_4-1
FC-5-split
Daniel J Walsh
2006-02-17 20:00:08 +0000
d0cfe1d1ab- Latest upgrade from NSA Added a check for failure to declare each sensitivity in a level definition. Changed to clone level data for aliased sensitivities to avoid double free upon sens_destroy. Bug reported by Kevin Carr of Tresys Technology.
Daniel J Walsh
2006-02-16 18:44:15 +0000
6d151699a3- Latest upgrade from NSA Merged optionals in base patch from Joshua Brindle.
checkpolicy-1_29_2-1
Daniel J Walsh
2006-02-13 19:31:17 +0000
428c7aa7cd- Latest upgrade from NSA Merged checkmodule man page from Dan Walsh, and edited it.
checkpolicy-1_27_20-1
Daniel J Walsh
2005-12-04 13:13:34 +0000
e8c9487983- Latest upgrade from NSA Added error checking of all ebitmap_set_bit calls for out of memory conditions. Merged removal of compatibility handling of netlink classes (requirement that policies with newer versions include the netlink class definitions, remapping of fine-grained netlink classes in newer source policies to single netlink class when generating older policies) from George Coker.
checkpolicy-1_27_19-1
Daniel J Walsh
2005-12-01 20:02:47 +0000
f4574040bd- Latest upgrade from NSA Merged dismod fix from Joshua Brindle.
checkpolicy-1_27_17-1
Daniel J Walsh
2005-10-25 19:18:26 +0000
33c5c28812- Latest upgrade from NSA Removed obsolete cond_check_type_rules() function and call and cond_optimize_lists() call from checkpolicy.c; these are handled during parsing and expansion now. Updated calls to expand_module for interface change. Changed checkmodule to verify that expand_module succeeds when building base modules. Merged module compiler fixes from Joshua Brindle. Removed direct calls to hierarchy_check_constraints() and check_assertions() from checkpolicy since they are now called internally by expand_module().
checkpolicy-1_27_16-1
Daniel J Walsh
2005-10-21 18:48:50 +0000
af4dd8d071- Latest upgrade from NSA Removed obsolete cond_check_type_rules() function and call and cond_optimize_lists() call from checkpolicy.c; these are handled during parsing and expansion now. Updated calls to expand_module for interface change. Changed checkmodule to verify that expand_module succeeds when building base modules. Merged module compiler fixes from Joshua Brindle. Removed direct calls to hierarchy_check_constraints() and check_assertions() from checkpolicy since they are now called internally by expand_module().
Daniel J Walsh
2005-10-20 20:34:02 +0000
acfce4cb75- Latest upgrade from NSA Updated for changes to sepol policydb_index_others interface.
checkpolicy-1_27_11-1
Daniel J Walsh
2005-10-18 18:27:54 +0000
b1c24f328b- Latest upgrade from NSA Updated for changes to sepol expand_module and link_modules interfaces. Sat Oct 15 2005 Dan Walsh <dwalsh@redhat.com> 1.27.9-2 - Rebuild to get latest libsepol
checkpolicy-1_27_10-1
Daniel J Walsh
2005-10-18 14:17:02 +0000
571771b17d- Latest upgrade from NSA Merged support for require blocks inside conditionals from Joshua Brindle (Tresys).
checkpolicy-1_27_9-1
Daniel J Walsh
2005-10-14 12:31:36 +0000
b8c325caf1- Latest upgrade from NSA Merged several bug fixes from Joshua Brindle (Tresys).
checkpolicy-1_27_7-1
Daniel J Walsh
2005-10-06 16:08:53 +0000
43314203eb- Latest upgrade from NSA Merged MLS in modules patch from Joshua Brindle (Tresys).
checkpolicy-1_27_6-1
Daniel J Walsh
2005-10-04 18:02:36 +0000
e21e3bfb9d- Latest upgrade from NSA Merged error handling improvement in checkmodule from Karl MacMillan (Tresys).
checkpolicy-1_27_5-1
Daniel J Walsh
2005-09-29 01:18:06 +0000
d3c90af390- Latest upgrade from NSA Merged bugfix for dup role transition error messages from Karl MacMillan (Tresys).
checkpolicy-1_27_4-1
Daniel J Walsh
2005-09-27 19:00:56 +0000
e34019964c- Latest upgrade from NSA Fixed parse_categories handling of undefined category.
checkpolicy-1_27_2-1
Daniel J Walsh
2005-09-21 14:18:23 +0000
ba974b169b- Latest upgrade from NSA Merged bug fix for role dominance handling from Darrel Goeddel (TCS). Wed Sep 14 2005 Dan Walsh <dwalsh@redhat.com> 1.26-2 - Rebuild to get latest libsepol
checkpolicy-1_27_1-1
Daniel J Walsh
2005-09-17 11:40:23 +0000
Bill Nottingham
Jesse Keating
Daniel J Walsh
Tom Callaway
Karsten Hopp